$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8628acab-afbe-4bb8-ae92-bc026dac3bb9.roa File: 8628acab-afbe-4bb8-ae92-bc026dac3bb9.roa (raw, json) Hash identifier: zEDCUE1HVZTKPkDMDPAMes7LUaD8kt18WJhrg1K3JLI= Subject key identifier: E9:8C:7A:06:E1:B5:44:8C:33:13:66:DA:35:67:B8:08:9F:6A:7C:EA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1FF6979227942E0FFEEEB5415071DF5277C6AF0E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8628acab-afbe-4bb8-ae92-bc026dac3bb9.roa Signing time: Thu 26 Feb 2026 01:50:35 +0000 ROA not before: Thu 26 Feb 2026 01:50:35 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:f6:97:92:27:94:2e:0f:fe:ee:b5:41:50:71:df:52:77:c6:af:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 26 01:50:35 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=71d10adc18dbeedb2d7615cb992af27e43f99f236b782db18faa9abdb2a4c52a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ad:af:61:22:9e:18:be:c7:75:2c:8c:f2:35: b1:9a:e6:c0:6b:4f:36:ac:8d:4b:f2:4a:93:92:e5: 4c:5f:a2:0f:f2:2f:f2:98:11:e5:3f:c3:ef:15:24: bc:1d:08:f5:8e:4a:b3:e1:84:c5:e4:4b:67:b2:25: cd:2f:c3:20:97:04:ce:ee:2f:12:69:2e:d1:a8:aa: bf:b0:33:7e:bb:d1:70:32:68:e8:52:8c:b2:14:3b: 7e:bd:dc:db:fa:99:49:6d:4e:5b:a9:38:d7:d8:59: 88:4c:bc:4b:d3:56:0b:65:f2:e4:93:4a:7e:99:3e: b2:66:37:02:63:c9:36:da:17:7a:ef:0b:0a:90:33: ef:78:78:f3:fa:75:d7:bc:79:4c:e7:f4:c1:42:25: 4d:30:41:1e:b1:6d:52:6b:9b:06:62:a2:fb:b5:9a: 73:04:cc:90:c5:8a:c2:0a:13:c2:56:e1:84:c2:4c: be:50:dd:a3:8a:ba:b5:65:5c:20:63:4a:2b:49:cc: 2f:e9:f9:57:c5:e4:29:ec:90:40:67:fc:46:3e:b8: ee:72:36:a6:95:9e:64:e6:4f:a6:a4:9a:9f:8b:c3: 4c:54:73:a0:f9:ab:db:fb:9c:cc:dc:91:cb:4c:fe: 33:c3:8e:87:af:9f:85:46:03:59:c2:e2:2d:57:2a: 5b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:8C:7A:06:E1:B5:44:8C:33:13:66:DA:35:67:B8:08:9F:6A:7C:EA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8628acab-afbe-4bb8-ae92-bc026dac3bb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.164.0/22 Signature Algorithm: sha256WithRSAEncryption 03:40:08:6d:13:e1:54:b9:aa:47:7e:99:ec:94:f0:00:c4:42: 8e:c7:c5:78:2a:43:aa:8c:d1:98:8d:a0:03:da:b5:3e:6f:82: 73:9c:af:e4:0a:6d:09:5a:a6:67:a7:2b:f9:e4:63:86:a6:ac: 7d:b4:5e:49:ff:40:ec:af:0e:78:9f:f1:c6:c5:5e:0d:c9:7f: 70:ef:75:0a:a9:db:c8:b5:4e:cc:66:eb:dd:91:08:cc:95:e9: 7c:de:7a:2c:67:d5:68:e3:c8:f8:0f:fd:0c:04:dd:0d:17:0e: b3:b8:8e:e0:cb:46:c6:54:d3:01:9d:c3:9e:4a:81:cc:9a:4c: eb:5f:d3:ab:e0:8c:2e:c7:ae:88:ad:f5:b6:89:24:54:84:7f: 16:33:c9:60:f9:d3:e2:bb:c5:d3:f1:98:60:6b:ce:0e:67:50: 4d:5e:30:58:9c:11:13:81:8e:38:45:f0:04:7b:46:eb:ab:4f: 78:65:50:39:01:5a:54:f7:73:0c:5d:3c:4d:60:aa:b2:0d:50: e2:a2:71:a4:ea:bd:d2:e3:fb:46:bb:8f:7c:5e:28:07:8b:df: 74:55:f4:69:06:c2:72:46:5e:dc:8a:5c:20:e1:6d:be:17:cf: 3a:04:01:28:d6:1e:69:5a:b2:36:73:25:01:2e:4b:e7:ad:c1: af:32:9d:d5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH/aXkieULg/+7rVBUHHfUnfGrw4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI2MDE1MDM1WhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MWQxMGFkYzE4ZGJlZWRiMmQ3NjE1Y2I5OTJhZjI3ZTQz Zjk5ZjIzNmI3ODJkYjE4ZmFhOWFiZGIyYTRjNTJhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUra9hIp4Yvsd1LIzyNbGa5sBrTzasjUvySpOS5Uxfog/y L/KYEeU/w+8VJLwdCPWOSrPhhMXkS2eyJc0vwyCXBM7uLxJpLtGoqr+wM3670XAy aOhSjLIUO3693Nv6mUltTlupONfYWYhMvEvTVgtl8uSTSn6ZPrJmNwJjyTbaF3rv CwqQM+94ePP6dde8eUzn9MFCJU0wQR6xbVJrmwZiovu1mnMEzJDFisIKE8JW4YTC TL5Q3aOKurVlXCBjSitJzC/p+VfF5CnskEBn/EY+uO5yNqaVnmTmT6akmp+Lw0xU c6D5q9v7nMzckctM/jPDjoevn4VGA1nC4i1XKluPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6Yx6BuG1RIwzE2baNWe4CJ9qfOowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg2MjhhY2FiLWFmYmUtNGJiOC1hZTkyLWJjMDI2ZGFjM2JiOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0VKQwDQYJKoZIhvcNAQELBQADggEBAANACG0T4VS5qkd+meyU8ADEQo7H xXgqQ6qM0ZiNoAPatT5vgnOcr+QKbQlapmenK/nkY4amrH20Xkn/QOyvDnif8cbF Xg3Jf3DvdQqp28i1Tsxm692RCMyV6Xzeeixn1WjjyPgP/QwE3Q0XDrO4juDLRsZU 0wGdw55KgcyaTOtf06vgjC7Hroit9baJJFSEfxYzyWD50+K7xdPxmGBrzg5nUE1e MFicEROBjjhF8AR7RuurT3hlUDkBWlT3cwxdPE1gqrINUOKicaTqvdLj+0a7j3xe KAeL33RV9GkGwnJGXtyKXCDhbb4XzzoEASjWHmlasjZzJQEuS+etwa8yndU= -----END CERTIFICATE-----Generated at Sun Mar 1 21:42:32 2026 by rpki-client